/1-SC. 


o;-3i-20oai 



FEDERAL BUREAU OF INVESTIGATION 


b2 

b6 

b7C 


Precedence: DEADLINE 09/7/2007 

To: Operational Technology Division 

Office of General Counsel, 

National Security Law Branch 
Science and Technology Unit 
Investigative Law Unit 

Cyber Division 


Date: 
Attn: 


08/16/2007 



Attn:4 

^Attn: 

Attn: 


Attn: AD, James E. Finch, 


Special Technology and AppxScations Attn: DAD, Louis' 

Office 


From: Records Management 

RIDS/WPU/ Winchester Site 2 , GR N23 
Contact : 


Approved By : Hardy Day 




he 

b7C 


Drafted By: 


Case ID #: 19Q-HQ-Cl547903j^J^ 

Title: FREEDOM OF INFORMATION ACT REQUEST PROM 

WIRED -NEWS, ELECTRONIC FRONTIER FOUNDATION AND CNET NETWORKS 


Synopaia: To advise HQ Divisions to search for responsive documents 

created on or before August 1, 2007 and submit them to the Work Process 
Unit I (WPU-I) , Record/ Information Dissemination Section (RIDS) , 
pursuant to the three captioned Freedom of Information Act (FOIA) 
requests for all agency records concerning the subject. Computer and 
internet Protocol Address Verifier (CIPAV) . 


Details: By letter dated July 17, 2007, Wired News, through Kevin 

Poulsen, submitted a FOIA request to FBIHQ seeking the following 
records ; 

Any documents (including, but not limited to, electronic 
records concerning the FBI's development and utilization of the so- 
called Computer and Internet Protocol Address Verifier (CIPAV) , a tool 
used to identify and/or monitor a target computer in a criminal or 
foreign intelligence investigation. 


ALL IHFOKHATION COHTAIUED 

HEFEEIH IS UNCLASSIFIED 

DATE 09-17-2008 BY 60322UC/LP/STP/gig 










i 


To: 


Operational Technology Division From; Records Management 
Office of General Counsel 
Cyber Division 

Special Technology and Applications Office 
Re: 190-HQ-C1547903, 08/16/2007 


• any other portable media (CD-ROMs, diskettes, 

etc . ) 

FBIHQ personnel are directed to conduct a thorough search for 
any and all documents in their possession responsive to these three 
FOIA requests for all records created on or before Aucnist 1. 2007 (the 
first date that WPU/RIDS began to search for documents potentially . 
responsive to these three FOIA requests) . 

Please note that not all of the documents you provide will be 
released. All material will be evaluated as to whether it is 
responsive to these requests. Those records determined to be 
responsive will be processed and redacted pursuant to the FOIA before 
they are released. After RIDS has processed and redacted the records, 
you will have an opportunity to review the documents before any are 
released to the requesters . 


3 



To: 


Operational Technology Division Prom: Records Management 

Office of General Counsel 
Cyber Division 

Special Technology and Applications Office 
Re: 190-HQ-C1547903, 08/16/2007 


L£A0(8): 

Set Lead 1; (Action) 

ALL RECEIVING OFFICES 


b6 

b7C 


Search for any and all information potentially responsive to 
the Wired News, CNET Networks, and Electronic Frontier Foundation's 
FOIA requests and forward do cuments with pertin ent enclosures, or your 
"no records" response to LAS | I WPU-I, Winchester, Site - 

2, GR N2 3 , by COB September 7. 2007. 





Subject: RE; UCO Proposal 




I agree wit H to n this. We have be en ae rfecttv willing to look to OGC for guidance and polic y and to 
follow that guidance and policy. Wha ll I s. and has been saying, is "give us some guidance." ! I 
and I have discussed this issue before and it is my understanding that there is a disagreement on the 
status of the IPAV between what FBI/OGC says and what DOJ/CCIPS. If OGC will set out a policy on: 
this, we will be glad to rely on it • , _ 

We all know that there are IPAVs and then there are IPAVs. Of course the technique can be used in a 
manner that would require a court order. We need to know how/when to draw the line for obvious 
reasons. 


I thihk ail of the Investigative Divisions should weigh, in on this, including Cyber. I. would love it Let’s 
; just get some guidance out there. 


I 

ALL /IHFORMATION COMTAISro • 

. HEREIH IS tlHCLASSiriEEk except; -• 
12 / 9 / 2004 , WHERE SHOM OTHERTJISE 


DATE; 10-23-2008' ^ ' 

CWSSIFIEI>- BY 6Q322UC/LP/3TP/gjg 
i^ASCK: :1.4 (C)' ' - 

DECLASSirY OJJ: 10-23'-2033 
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12/9/2004 


Page 2 of 13 


— Original Message 

From i I (ITD) (FBI) 

Sei rt; Wednesday. December 08 . 2004 10:30 AM 
Toil ](OGC) (FBI);L 


](OGC) (FBI)£ 


flT Dl fFBIl: DICLEME NTE. ANTHONY P. (ITD) (FBI) 

Cc :T ilTDHF Bn; MOTTA, TMOMAS G. (ITD) (FBlj;| 

fFB ra r oGCHFBn 

Subject: RE: UCO Proposal 


h6 

■b7C 


loGC) 


SECRET! 

RECQRi 


•bl 


(S) 


1 don't necessarily think a search warrant is needed in all cases, I agree that if the AUSA says 
XXX and the SAC authorizes it as lawful in a field Division, that would be fine. But haying said 
that, Several months ago I found my employees in a position of having to work out these 
problems across the country without FBI/OGC policy guidance. Until a policy or directive is put 
in place, DITU has and will support any case that obtains a search warrant Over the last six 
months it has not proven to be an obstacle to investigations. I don't think it need be 
controversial nor even difficult for OGC to draft and disseminate appropriate guidance. It may 
be that In some ca ses a search warrant is needed and in others an AUSA can say no search ; 
warrant is needed. I - 


b2 

b7E 

b6 

b7C 


J t am not personally concerned with suppression, as that is an operational and leg^ 
concern is merely constitutional and ensuring that my personnel are acting within 


mansr. 

scope and guidance. 

There are many statements in this string of Email that Indicate that ITD is this or ITD is that. . 
What ITD "is" is awaiting appropriate legal guidance. Until such time as ills disseminated from. 
OGC we will continue with our current cautious approach. I don't pretend to know the answer. I 
leave that to OGC. • 


ss/T 

^DataT 




1 ecnnblbgy Unit 


—-Original Message 

Froml 


b6 

•b7C 

bl 


J(OGC) (FBI) 


Se nt; Wednesday. Decembe r 08, 2004 8:40 AM 


To 

Cc 


(OGC) (FBI); f^ 

Subject: RE: UCO Proposal 


](OGC) (FBI) 

|(fTD) (FBI); MOTTA, THOMAS G. (ITD) (FBI) 
](OGC) (FBI) 


SECRET 


nn 


<S) 


I'll talk to you today at FBIHQ but ITD is Interested in establishing an FBI policy on this 
matter via OGC. Cyber will get its say if the EC ever makes it to the coordination 
process. ITD's position on this matter is driven by CCIPS and by the fact that ITD 
believes that it is the only division that actually uses the IPAV tool albeit on behalf of . 
r divisions, FOs, etc., in botti criminal and FISA cases. 



Message . 


12/9/2004 


Page 3 of 13 


CZI 


— O riginal Message-- 

.Fromj 


KOGC) (FBI) 

Se nt! Monday, Dec ember 06, 2004 5:53 PM 
Tor i r lfO GC)(FBI). 

I flTDl fFBn: MOTTA. TH OMAS G. (nD) CFBI);[ 


TOGC) (FBI) 
Subject: RE: UCO Proposal 

SECRET 
RE^RI| 


lOGC) (FBI) 


b6 

b7C 


(S) 


bl 


This may be more controversial than I suspected. 



'b5 

b6 

b7C 


be 

b7C 


— Ori ginal Message--— 

From: ](OGC) (FBI) 


Sent: Monday, December 06, 20044:38 PM 
To: I "~n(OGC) (FBI) ^ 


(ITD)(FBI)( 


Cc: 

MOTTA, TMOMAS G. (ITD) (FBI) 
Subject: RE: UCO Proposal 


SECRET 


JOGC) (FBI); 


. bl 




Message SiQRHT Page 4 of 13 



see this as overall FBI policy. 

n 


Q riQirtai Message 

From j I fOGOfFSn 

Se nt! Friday. December 03, 2004 8:21 AM 

T0! L_ I fOGC) (FBI)J [(ITD) 

K OGQ (FBi y . 

CC! TOWMAN. M ARION E. (060 (FBn: l r OGn: 

^rOf;rlY FBT^; MOTTA, THOMAS G. (ITD) (FBI); 

foGC) (FBI) , 

Subject: RE: UCO Proposal 


b6 

•b7C 



Thank you l l an j" I 
Very helpful as always. 


□□ 





12/9/2004, 







— Ori ginal Message — 

From:! | CUD) (FBI) 

Se nt; vveanesaay, De^ mber 01, 2Qfl2 
To; i ~ l OGC) (fbdC 

(OGC)(FBI) 

Cc: B OWMAN, MARION E. (OGC ) (FBI) 
(OGC) i l (OGC) 

(OGC)(FBi5 

Subject: RE: UCO Proposal 



(S! 

There is still admittedly a good deal of uncertainty : 
about what authority is required to deploy an iPAV. 
OF course, the safest course is to secure a warrant, 
though one might arguably not be required-hence 
DOJ’s position that a warrant should be obtained. 



• 12/9/2004 
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might be able to flush out the ITD/DOJ view on this. 
I'm also includin g [ since he works most closely 
with Cyber Dlv and may be able to add to the • 
discussion. 



— Original Message-' — 

Ffom l ' I COGC) (FBI) 

Se nt! Wednesday, Decem ber 01, 2004 4; 16 PM 
To t I fOGO (FBI) 

CC! BOWMAN. MARI ON E. (OGC) (FBI); 

(rTD)(FBI) 

Subject! RE: UCO Proposal 


(S) . 

According to guidance issued by DOJ CCIPS, 
DOJ has "consistently advised AUSAs and 
agnets proposing to use IPAVs to obtain a 
warrant to avoid the exclusion of evidence." 



ated March 7, 2002, Written by 


h as adivsed me on this issue in the 
past and I copy herfor her comments. 
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• — O riginal — 

From:! 


loGC) (FBI) 


Se nt; Wednesday. Decembe r 01, 2004 1:51 PM 
To ! K CvDKFBI) 

Cci BOWMAN. MARI ON E. (OGC) (FBI); 


(OGC) 


1 


(OGC) (FBI) 

Subject: RE:. UCO Proposal 


SECRET r 

recordI 


bl 

(S! 


Have LA call me immediately or give me 
names and numbers. If I hear nothing, I 
am going to call the CDC myself. 



“ — Or iQinai Message^ — 

FromtQ 


(CyD)(FBI) 

Sent; Wednesday, December 01, 
20 04 1:21PM 


To: 

Cc: 

(fb: 


ICDl(FBl) 
J(OGC) 


Subject: RE; UCO Proposal 


SECRET r 

RECQRd 

Hell d 


<S) 


As we Knew each other from San 
Juan and now you are at CD-5, I'm 
going to be very candid with you. 

^ ^ -^bl 

b6 
b7C 
b5 
b2 . 
b7E 




Message SfiSHS: Page 8 of 13 



• b6 
blC 
b5 
>2 

for this conference call. Cyber and biE 

CD-30's positions are at a . 

minimum the URC needs full 

disclosure of LA's Intent to go 

outside the scope of the current 

renewal proposal. LA insists that . 

is my job. I pointed out that there / 

is no mention of use of an IPAV in 

the proposal and that If LA says is ' 

vital then perhaps more than a 

passing mention of "tracking 

software" in and among how the 

next phase would likely be . . . 

introduction of an UCA is hot . 


b2 
b7E 
b6 
b7C 
bS ■ 


enough. No legal review has beer^ 
conducted. I I 


1 CD-3C was present 


b2 

b7E • 
b5 


12/9/2004 
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h2 

b7E 


Techno terms aside, as you may 
remember, I have a degree in 
Physics. This degree included 
some computer 

programming because USC wants 
it's graduates to be abie to write, 
programs to crunch large amounts 
of data with various formuiae. So 
if they can’t explain it to me, it 
never happened. 


Ali this said, in Cyber, i'm writing 
an EC today, teiling LA we do not 
authorize use of any IPAVs. . 
Whether a FISA is required or ' 
not, i need to foiloW-u p with! I 
on that. And trust mel js 


I'm 


experienced in these matters, 
not even sure if this should . 
continue (without the IPAV aspect) 
in accordance with the initial 
proposal, to be "passive." ' 


^ Sincere ly, 


ssa[ 


Cyber Division (CyD). Computer 
Intrusion Section (CIS), . 
CT/CI Computer Intrusion Unit 
fC3IU) ^ 


b6 

■b7c' 

b2 


— O riginal Message— — 
From r l (CD) 

(FBI) 

Sent: Wednesday, 



V Message 
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December 01, 2004 11:39 
AM : 

To: l I 

(CyD) (FBI) 

Subject: UCO Proposal 

SECRET r 

record I I 

(S) 

I just reviewed yoi? ^ 
presenter's page: Sorry for 
being late but I just got a 
cjiance to sit down here in 
NYO and respond. 

Mas anyone from NSLB 
reviewed it? . 



Also, were any stipulations 
that had to be addressed? 
Refer to the attached EC 
that lists these issues, 
Some of the board : / , 
members skim the 
proposals and need to be 
reminded on where to find 
the Info. 


SEGRH: 


involved in answering 
operational questions, so I 
don't know if they were able 
to help....) 


12/9/2004 
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On the cover page, there 
should ho a cnnt tn inHirafo 

whether! jwas 

contacted (administrative ' 
step- more so they are 
aware of a Group I within 
their division , since this 
doesn’t really entail, their 
services. This includes a 
hriof aHarhmanf from LA 

p fferring their 
assistance s needed....) 


h2 

hlE 


ssaC 


Counterintelligence .Division 
CD-5A 

Undercover/Loo istics 
(cell) 


Secured Fax(_ 
Unsecu red 


T 


1 


b2 
b6 • 
b7C 




dated 1/97. Forei; n 
VCo unterinteMip 
ivestiqatlons 
iCLASSiFiC/LTiON 
E 

SECRET 





DERIVED FRt 
Classiflcation \ 

1/97. Foreign! 
Counterintet 
lnvestig ati< 
DECLASSIFICATION 


G-3 FBI 

»uide G-3. dated 
ice 


EXEMPTU 

SECRETi 


INI 


-gECREI- 


DERIVED FROM: G-3 FBI 
Classificauon Guide G-3. date^ 1/97. 
Foreign CQunterlntelliQence 
Investiqyions 

DECLASfSIFiCATION EXEMPTIO)^ 1 


12/9/2004 
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SECRET 


DERIVED FROM: G-3 FBI Cl/ssification 
Guide G-3. dated 1/97. Formgn ~ 
Counterintelligence Investigations 
DECLASSIFICATiON EXEMPTION 1 
SECRET 


DERIVED FROM; G»3 FBi/Classiffication Guide 0-3, 
dated 1/97. Foreign Coi^terintelligence 
investigations 

DECLASSIFICATION EXEMPTION 1 
SECRET 


DERIVED FROM! G-3 FBI 


G-3. dated 


1/97, Foreign Count s 

de classIficatioi 
SECR'iy 


Ll nt elliaence Investigations 
EXEMPTION 1 


DER IVED FRO I 
Foreign CounterJnJ 
DECLASSIFIC AT} 
SECRET 


N 


M assificat ion G uide G-3. d at ed 1/97, 
^enc e invest ig ations 
CEMPTLON i 


DERIVED FROM: G-3 FBI Cla ssiffi< 
Coun terl ntelligetfee Invest i gations 

declassificMion exemption 1 

SECRET 


ion Guide G-3. dated 1/97. Foreign 


DERIVED FROMT: G-3 FBI Classification Guide G-; 
Counterintelligence Investigations 
DECLASSIFICATION EXEMPTION 1 
SECRET 


dated 1/97. Foreign 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97^ Foreig n 
Counterlntemgence Investigatiohs 
DECLASSI0CATION EXEMPTION 1 
SECRET 


SKREl 
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DERIVED FROM: FBI Classification guide G^. dated 1/97. Foreign 

Counterlntelllaekce Investigations 

declassificatiisMxemptiqn 1 

SECRET 


DERIVED FROM: G-3 FBI Classireytion Guide G-3. dated 1/97. Foreign Counterintelligence 
Investigations 

DECLASSIFICATION EXEMPTIQ^ 1 
SECRET 


DERIVED FROM; G-3 FBI Cl^sificatlon Guide G-3, tfated_1i97, Foreign Counterintelligence 


DECLASSIFICATION EXEfl^PTION 1 
SECRET 


9EGRH-: ; 

12/9/2004 - 






Message Page2ofll. 


There are many statements in this string of Email that indicate that ITD is this or ITD is that. What 
ITD "is" is awaiting appropriate legal guidance: Until such time as it is disseminated from OGC we will, 
continue with our current cautious approach. I don't pretend. to know the answer. I leave that to OGC.' 


Jechnology Unit 


— O riginal Message’*; - 
From:| |(OGC) (FBI) 

Sent! weanesaay, December 08, 2004 8:40 AM 

TO ! I ' K OGC) (FBI) • • - ■ 

Ccl l(ITD) ( FBI); MOTTA, THOMAS G. (ITD) (FBI); |(OGC) 

(FBD I l (OGC)CFBIl ■ 

Subject: RE: UCO Proposal bi 

: h2 

-SECBED 1 ■■ ■ . ■ ' ■ \ 

RECORI b7C 

— — ^\S) 

r — I 

I'li talk to you today at FBIHQ but ITD is interested in establishing an FBI policy on this matter 
via OGC. Cyber will get its say if the EC ever makes it to the coordination process. ITD's 
position on this matter is driv en by C CIPS and by the fact that ITD believes that it is the only 
division that actually uses th ^ [ tool albeit on behalf of other divisions, FOs, etc., in both 
criminal and FISA cases. 


[~] 


— O riginal Message — 

From! | l OGC) (FBI) 

Se nt: Monday. Dece mber 06, 2004 5:53 PM 
To: | _~k0 GC)(FBI) 

Cc: l ^^flTDI (FBH: M OTTA. THOMAS G. (ITD) (FBI)j 

(OGC^ (FBI H I rOGC^ fFBD 

Subject: RE: UCO Proposal 



, 12/9/2004 
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Steve 


— -O riginal Messaoe- 

Fromf 


l(OGC) (FBI) 


Se nt; Monday, Decemb er 06, 2004 4:38 PM 

To J " IfOGO (FBIV 

Cc; i _ \ (nD) (FBI)J 

THOMAS 6. (nO) (FBI) ' 

Subject: RE: UCO Proposal 


(OGC) (FBI); MOTTA, 


bl 

h2 

B6 

hlC 

hlE 


SECRET 


RECORd 






(S) 


I want to spend more time on this matter but know that DITU/I TD has a sked me to 


draft an EC that will establish that, as a matter of FBI policy, all l 1 will 
be employed pursuant to a Rule 41 SW based upon the position taken by CCIPS. 
Also, I have to disagree with i I when he says that National Security Is not a 
context within which we need to be concerned about use of IPAVs; ITD looks at 
every case now as a possible criminal prosecution. The time has past when we 
can comfortably talk in terms of FISA or prosecution as an either or proposition. 
For all practical purposes, every FISA case is viewed as a p otential Federal 
prosecution waiting to begin. That said, ITD won't employ an i I vithout a SW 
and would like to see this as overall FBI policy. 


— Or iginal Message 
From; ! 

Sent! Friday. Ppremhpr 03 2004 8:21 AM 
:l k oGC) (FBI),f 


]OGC) (FBI) 


TO 


KogcHfbi) ^ 

CC! BOW MAN. MARION E. (OGC) (FBI)| 

1 (OGC) (FBI); MOTTA, THOMAS G. (IJD) (FBl)f 
JOGC) (FBI) '■ 


](ITD)(FBI); 

locoi 


bl 

b2 

b6 

,b7C 

b7E 


3 


Subject: RE: UCO Proposal 



: . Thank you | ^ nd l I 
Very helpful as always. 


(S) 


SfeSRET 


From:L 


](OGC)(FBI) 


Sent: Thursday, December 02, 2004 6:33 PM 
To:| _ _K ITD) (FBI);| 

I k oGc) (FBI) . 

Cc; BOWMAN, MARION E. (OGC) (FBI)£__ 


JOGC)(FBI); 


lOGC); 



Message- 


SEp«^ 
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(OGC) (FBI) 


] (OGC) (FBI) 


From: 

Sent: CfufiSday^ DecerTiber 07, 20d48r31 

To: 

Cc: 


JOGC) (FBI): 


(OGC) (FBI) 


[fffe 


(FBH 


kmnEBi): motta jhomas g. htd) {fbi 
I (OGC) ^F BII 


](OGC) (FBI) 


(OGC) (FBI)£ 


(OGC) 


Subject: RE: UCO Proposal 


bl 

b2 

b6 

b7C 

b7E 


SECRE 

RECO 


n 


(S) 


Thanks for looking at this, all you STLU guys. I think Greo Motta.| [and I would 

need to review any guidance on this to make sure all bases are covered. Please put us all on any EC being 
drafted as signatories so we can be sure that this has been property vetted. 


Thanks 


b6 ■ 
•'b7C 


— OrlQinal Message — 

From:| 


JOGC) (f=BI) 


Se nt; Monday, Dece mber 06, 2004 5:53 PM 
- ~i:O GO (FBI) 


Tod 

Cci 


I lOGC) (FBI) 

SUBje«! Rbl ULU Pt-(5posal 


SE£BEI_ 

RECORC[ 


rro) (FBI); MOTTA, THOMAS G. (ITD) (FBI)[ 


(OGC) (FBI); 


(S). 


bl ' 
•b2 ' 
b6 
b7C 
b7E 


This may be more contmversial than I suspected. 



O riginal Message- — 


Fromf 


Se nt; Monday. Decern 

Toj 

Cc:l 


OGC) (FBI) 
per 06, 2004 4:38 PM 

(OGC) (FBI) 

pTD) (FBI); | 


DATE; iO-23-2008 

CLASSIFIED BY 60322UC>LP/STPygjg 

PEASOH:' 1.4 (C) • , . 

DECLASSIFY OH: 10-23-2033 


](OGC) (FBI); MOTTA, THOMAS G. 


be 

bic 


12/9/2004 



ALL-. IHFORKATION CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
'.NHEPE SHOT®' DTHERNISE 
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(rrD)(FBI) 

Subj^: RE: UCO Proposal 




bl 

■b6 ' ■ ■ 

,b7C 



12/9/2004 
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Subject: RE; UCO Proposal 





Message 



Page 1 of 3. 



No handouts. I talk to case agents and TTAs on the phone about the capabilities and how the collected inlb is 
provided to the field for ELSUR compliance. I email case agents the template s/w, app, and affidavit after we 
received a RMS from their TT A. Sometimes, l .will email case agents the definition I provided to you and I have 
also provided a more in-depth discussion of how the capability works to TTAs only via email. 


— O riginal Message- — 

From I K OGO (FBI) 

S ent! Tuesday. Nove mber 23, 2004 8:11 AM 
T d l OTD^ 

Subject: RE: Re IPAV/aPAV 


be 

hlC 





Oo you have an accepted definition of IPAV versus CIPAV? 


f l indicated that you have a standard handout that you provide field offices when they are thinking of 
using this tool, I need a copy of this material as well. 




■ b6 

■ b7C 


— O ilQinal Message--” - 

From I I (ITD) 

Se nt; Monday. Nov ember 22. 2004 11:53 AM 
I (OGC) (FBI) 

Subject: RE: Re IPAV/QPAV 



■Original Message- 


DATE: 10^23-=-2008 
CLA'SSiriED BY 60322UC/lP/STP/gjg 
REASOH; 1.4 (C),' 

DECLASSIFY OH.i 10-23-2033. 



11/24/2004 


. ALL . IHFORHATI-OW COilTAIHED 
. HE’RilH IS- yNCLASSiFlED EXCEPT ' 
• -'WHERE ,SH013 n'- OTHERWISE ^ 
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From j I fOGO (FBI) 

Sent: Monday. November 22. 2004 11:20 AM 
To | l(ITD ) 

Cc i K ITPVfFBn 

Subject: RE: Re IPAV/QPAV 


My understanding is tha ll K wants it to go to All Offices therefore all SA. He wants all SA to 
know that OGC expects a SW for all IPAV/CIPAV applications (no getting around ITD by:, 
going to another Division that currently doesn't follow CC IPS g uidance on this point). We can 
talk and clarify.- 1 intend to run my draft thru both you and l I before I begin the process of . 
working it up thru Motta to OGC. Wte need to agree first.. 


CD 


— Or iginal Message— - 
From: i "I fltpy 

Sent: Monday, November 22, 2004 7:34 AM 
To | n (OGC)(FBl) 

Subject: RE: Re IPAV/QPAV 


NON-RECORD 


Will. your EC be sent to only Tech Agents or all Agents? 


Qriotnal Mgssaqe---- 

From i t OGC) (FBI) 

Se nt; Friday, Novemb er 19. 2004 5:20 PM 
To; | iry p) 

Cc; l i (ITD) (FBI) 

Subject: Re IPAV/QPAV 


b6 

b7C 


NON-RECORD 


IZZt 


I t asked me to draft an EC to all field offices reg arding the fact that it is 
OGC's Dosition that a search warrant is requlred td 


□□ 


SENSITIVE BUT UNCI 


11/24/2004 
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Page 1 of 3 


|(OGC)(FBI) 

From: i l oTP) 

Sent: iJuesday,..jjoyefT 'b^23. 200^8^20^^ 

To: j 

Subject: RE: Re IPAV/CIPAV 

SENSITIVE BUT URCtASStFTgD 
NON>RECORD 

The definition previously emailed for CIPAV is our cm 
call it CIPAV. IPAV, or Web Bug.^ 


— Original Message — 

From I l (QGC) (FBI) 

Se nt! Tuesday. Nove mber 23, 2004 8:11 AM 
To j l (ITD) 

Subject: RE: Re IPAV/GPAV 


□ 

‘t 

Do you have an accepted definition of IPAV versus CIPAV? , 

f i ndicated that you have a standard handout that you provide field offices when they are thinking of 
using this tool. I need a copy of this material as well. 

Thanks, 


□ 


— Original Message---; 

From ! If lTDl 

Se nt: Monday, Nov ember 22, 2004 11:53AM 

To d I (OGC) (FBI) 

Subject: RE: Re IPAV/QPAV 


NON-RECORD 



O riginal M( 

Fromd 


!lioGQ (FBI) 


DATE; 10-23-2008 • • 

CLASSIFIED BY '60322UC/LP/3TP/gj g 
■PEASOH;- 1.4, (C) 

DECLASSIFY ON: 10-23-2Q-33 


M/24/2004 



•ALL IHFOPKATI ON, CONTAINED - ' 
HEREIH IS WCLA33IFIED EXCEPT 
VHEEE .SHONH OTHERWISE 




, Message 



Page 1 of 3 : 



Subject: RE: Re IPAV/CIPAV 


b6 
b7C 

appitcatioh and search warrant attached 



— O riginal Message- — 

From j I fQGa (FBI) 

Se nt: Monday. Novetp ber 22 , 2004 4:10 PM 
To| ITD) 

Subject! RE: Re IPAV/aPAV 



Do you have any ponies of SW used to actually employ this tool? 




— O riginal Message— b6 

From t K OGOCFBI) 

Sent: Monday, November 22, 2004 11:20 Am 

To l ~HT D) 

zc i I (no) (FBI) 

Subject: RE: Re IPAV/aPAV PATE; 10-23-2008 : 

CLASSIFIED BY 60322UC/LP/STP/g-jg 
SEAS0H:-1.4 (C) • 

DECLASSIFY OWi: 10^-23-2033 . • ; ' ’ 

My understanding is tha t I wants it to go to All Offices therefore all SA. He wants all SA to. 





ALL - ISFORHATIQN CCHTAINED , 
-HEFEISr.-IS 'tJNCLASSIFIE'D -.EXCEPT' 
WHERE SHOWM OTHERWISE' 
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}oGC) (FBI) 


From: 


(ITD)(FBI) 


Sent: C^ohday, Noyemb.er_^^^^ 2004, 10:28 AM~1 
U oQC) fFBn 


To: 


b2 

b6 

b7C 

b7E 


Subject: RE 


SENSITIVE BUT UljcDtSSta^P 
NON-RECORD 


b5 


bl 


(S). 


(S) 


As to conferring with CCIPS -it's probably not a bad idea, since we regularly accuse them of establishing legal 
arguments that effect our techniques without conferring with us.- That said, I would consider having all your pros 
and cons determined and supporting case law prior to discussing it. 


good li^c k. 


Or iginal Message- 




JOGC) (FBI) 


From 

Se nt: Monday, Novern ber 08, 2004 9:08 AM 
To j trrD)(FBI) 

Subject: RE:| 


b2 

b6 

b7C 

b7E 


SENSITIVE BUT UNCEASSiflED 
NON-RECORD 


Thanks[ 


DATE': 10-23-200S 

CUSSIFIZP BY 60322UC/LP./STfyglg 
REASOU: 1.4 (C) 

DECLASSIFY OH: .10-23-2033 


Would a Magistrate listen to these arguments and act accordingly or do they strictly rely upon CCIPS in 
computer cases? I . guess my questions is do I need to di»;u5S this with CCIPS or Just provide case law 


11/9/2004 



ALL - IHFOFHATION. CONTAINED 

IS OirCLASSiFIED EXCEPT 
WHERE OTHERWISE 


Message 




Page 2 of 7 


and argument to the case agent and the AUSA and letthe AUSA work with CCIPS if this is the direction 
that he/she wants to go? 



Looks like you have a good Magistrate.. I'll do some checking and get back to you] pnd 

i I- any thoughts? 




• he 
blc 


■ b2 
'•:b7E 


11/9/2004 




Message 


11/9/2004 




Pages of? 


SENSITIVE BUTUpCtAftaffig ' 
NON-RECORD 


b6 

b7C 


i Spoke with U.S. Magistrate Judge Michael W. Leavitt in Yakima, Washington - 
regarding the possibility of extending the Search Warrant for a period of time greater 
than 10 days' As it is right now. I am having to travel from Seattle to Yakima or 
Spokane, which are on the oth^ side of the state, every ten days, which as become 
very old. The Magistrate understands the problem Inherent wit h this type of SW and 
believes there should be awav to get aro ur^d this 1 0 dav issue. I I 


I nfe MiadiStfatS not sure IT inis was possible 


he only suggested we look into it. This is an ”if then" type of scenario. 




Just an idea,. Let me know what you think. 


—O riginal Message 

From f I fQGCUFBn 

Se nt; Friday. November 05 . 2004 1:37 PM 
To i kSEUFBn 

Subject! FW:| 


b2 

be 

,b7C 


b2 

b7E 


SE NSITIVE B UT UNCEASSfff^ 
NQN:R^SflRD 


b2 

b7E 


I'm OGC counsel to ITD and interested in your Magistrate's thought that he can 
get a search warrant for an IPAV/CIPAV for a period of time greater than the 10 
day period authorized by Rule 41 . As you can see the lawyers at ILU are 
stumped. Is it possible that you or you AUSA partner can ask the Magistrate for 
details? How does he see doing this? 

This could be very important if we could get SW for periods to exceed 10 days. 
Please let me know what you think. 


Thanks, 




Assistant General Counsel 
Science and Technology Law Unit/OGC 


b6 

b7C 


SEgREj 


-—Or iginal Message — 

From d K OGO (FBI) 

Se nt: Friday, Novem ber 05, 2004 3:37 PM 
To: 

Cc: 




Subject: RE: 


3 


;) (FBI) 
OGCUFBn 


b2 

,:b7E 


SENSITIVE BUT UNfctASgiRED 



Message 


T 


Page 4 of 7 


NON-RECORD 

Don't know off the top of my bald head,^ But. we will give it a look, 
please explore this Issue. I— -I 


^ — Or fQinal f^essaoe-— 

From: ! f OGD (FBI) 

Se nt! Thursday. Novemb er 04, 2004 3:07 PM 
To j D GO (FBI) 

Subject: FW \ 


ti6 

:b7C 


■b2 
■ :b7E 


S£NSITIVE BUT 
NON-RECORD 


[=1 

The question to me is can a federal magistrate issue a sea rch warrant 
against a computerl I 


Jfor a period of time to exceed the 1 0 days 


. b2 
b7E 


authorized by Rule 417 Right now we have to go back to the magistrate 
every 10 days to keep these things going. I have found no authority to 
exceed the 10 day rule of the Rule 41. Do you know of any execptions? 


Thanks, 


— Or iginal Message- 
From: f~“ 


](OGC) (FBI) 


Se nt; Thursday. Nov ember 04, 2004 2:59 PM 
To j \(np ) 

Cc f ^(ITDHFBI) 

Subject! RE:1 


UN5Cfta9nqE5^ 

NON-RECORD 


be • 
b7C 


•'b2 

b7E 


I've researched the taw on searching and seizing computers and data 
and have determined that Federal Rule of Criminal Procedure 41(c)(1) 
dictates that the search must be conducted "within a specified time not to 
exceed 10 days.” I know of no way a Magistrate can deviate from this, 
guidance but ril ask the investigative Law crowd for their view. 


he 

b7C 


— O riginal Message — -- 
Frotn r^ t lTD) 


Sent: Thursday. 
ToJ 



Subject; FW 


Mober 21, 2004 7:40 AM 

□logc)(Fbi)- 


b2 ■ 
b7E 


11/9/2004 







Good luck and just email me the renewal date, and make 
that file name irresistable. 



, 11 / 9/2004 








Message 
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From: 

Sent: 

To: 

Cc: 


|(ITD) (FBI) 

~~1 (ITD)(FBI) 


fThursdav. O ctober-07.^QQ4.2:47 PM ^ 

tO GC)(FBI) 

~1(ITD) (FBll I 


b6 

blC 


(ITO) 


Subject: RE: Re: IPAVs 


SENSITIVE BUT UNCLASSIFtED 
NON-RECORD 

of course, I've be en trying to type up a summary of the meeting for you to have a record of it, but this email should 
help. FY H [ asked if he and I could talk through -or rather if I woul d listen to his arguments/concerns-simply 
because he Knows me. I told him I would discuss his concerns with you] and DITU. He also wanted to 
chat in advance of the CTC conference because they wanted to mention me use of IPAVs at the CTC conference 
that just concluded yesterday. I will provide copies of the slides for you. 


] Rjnause if its riPRinnpT 


Jf it has the ability t' 


Obviously this is of concern, because AUSAs will start drafting SW with technical descriptions as they understand 
the tool to work, but It may or may not be technipallv, correct, etc. -DITU has had experience on that front with 
OIPR...... As to the description of the technique j ip ointed to a number of places in the current SWtemplab ' 

that he thought were potentially inaccurate or thaTswed more detail tha n was nec essary to explain the tool for 
purposes of securing the warrant-he said he mentioned some of them t d l Although his biggest concern 
was with.the inadequate showing for delayed notice under 18 use 3103a. 

At the conference, CCIPS also touched oh the jurisdiction issue, but acknowledged that the issue is still under 
debate. Nonetheless t he handout (copy in the BU mail for you) clearly states CCiPS view-which is that Rule 41 
jurisdiction vests eitherl 


— — I It IS therefore 

more appropriate to analyze it consistent with a harddrive ima^7seizure and rather than with other forms of 
electronic surveillance which are statutorily governed. They rely primarily on United States v. Karo. 468 U.S. 705, 
718 (1984) for the rule that a search warrant can be obtained by describing the place or object where the beacon 
is placed regardless of where the beacon travels, even if it goes outside of the jurisdiction- See Rule 41 (b)(2). . 



10/7/2004 


AIL. IHFORKATIOH COOTAINED 
HEREIJI IS UNCLASSIFIED 
DATE 1-0-23-2008 BY 60322UC/LP/STP/g3 g. 


b6 

b7C 


b2 

b7E 


b6 

b7C 


b2 

b7E 
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— O riginal Message-- — 

Froni! l i rOGC^ (FBI) 


Se nt; Monday. Octob er 04, 2004 11:32 AM 

T0 \ 


(ITDHFBI) 


Subject: Re: IPAVs 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


b6 , 
b7C 




uc[ 


]has asked me to work dosely wittf 


]on the IPAV technique. I l and I sat 


down last Friday and talke d about where DITU is right now with the tech nique an d it was mentioned that 
you had an encounter wit rt l at CCIPS that you passed on to | f or Info only! 

DITU is concerned about this matter as it could dramatically affect the way they accomplish their mission. 


I would like to come oyer and sit down and talk to you about IPAVs in general anc{ 
particular. 


m 


When would be amenable to such a discussion? 


□ 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


10/7/2004 



Message 






Page 1 of 1 


kOGC) (FBI) 


From: 
Ser 
To: 


Sent: Lxhursday.-September 02,-2004-1 :08 -PM 1 

(OGC)(FBI) 


b6 

b7C ■ 




SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 



Dato Intercept Technology Unit/Soffwore Collection Group 
Digitiol Evidence Section, Investigotive Technology Division 

^<i/infiVA VA 


E ecure voice 
ecure fax 



b2 

be 

b7C 


K 


. fi- . y.. 




'’-0% 



' ■ »■ 






SENSITIVE BUT UNCLASSIFIED 


ALL' INFORMAtlOH COKTAIHED . 

HEREIN IS UHCLAS'SIFIED, 

DATE 10-17-2008. BY- 60322UC/LP'/STP/gj.g. 


9/2/2004 



(S) 


Message 


* , / *•, V 

(OGC) (FBI) 


t\ 


(ITD) (FBI) 


From: , | 

Sent: QuS^S^-August 31 . .2004-6;32-PM._ 

TCITD)(FBI){ 


To: 

Cc: 




CtTD); DIC LEMENTE. AH ^ 


pGC)(FBI)f 


Subject: RE; help 
3and[ 


Cl 




\ 




o 


Original Message — 

From J I flTD^ (FBI) 

Se nt: Tuesday. August 31. 2004 3:49 PM 
Tq I \ (OGC) (FBI) 

(rm) (FBni 


Se nt: Tuesday. August 

To -J 

Cd ^ 

Ion 


Page 1 of 3 


be 

b7C 


}lTD) 


(FBI); 


be 

b7C 



bl 


Subject: RE: help 

S£GBEI 

RECORD xxxx 


(rro) (FBi){ 


](rTD); DICLEMENTE, AI^HONY P. (ITD) (FBI); 


■be . 

b7C 


JoS) (FBI) 


m. 



bl 





I>ATE; iO-20-2008 ALL. INFOJ^TIOIi CONTAINED ,• 

. , V CLASSIFIED 3Y 60322UC/LP/STP/gjg . ; HEREIN IS UNCLASSIFIED EXCEPT 

9/1/2004 SeBBET ■ REASON;, 1.4 fC) WERE SHOUN OTHERWISE 

^ DECLAS'SIIT OH; -10-20-2033 
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PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT 
PRIOR OGC APPROVAL 


Assistant General Counsel 

Science & Technology Law Unit 

Engineering Research Facility 

Bldg. 27958A Room A-207B 

Qu antico, Va. 22135 

Tell 

Fa) 

pac 


h2 

he 

hlC 


SCIENCE & TECHNOLOGY LAW UNIT - OFFICE OF THE GENERAL COUNSEL 
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Message 


Page 1 of 2 


(OGC) (FBI) 

From: I l (ITD) (FBI) 

Sent: fVtfedn^day, August 04, 2004^1 1 ;47 AM i 
To: I | (OGC)(FBI) 

Cc: MOTTA. THOMAS G. (ITD) (FBI) 

Subject: RE; IPAVs 


b6 

b7C 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Vttached is the CCIPS memor^SQ aslj ifor a cqdv of the latest DRAFT FISA descriptions which includes a 


record) 


y 


(at any rate, I haven't attached it b/c then I would have to make it a . 
otnertnan mat I have not done any official legal analysis of it, but have had several discussion with 
]& Co. You also ought to take a look at the CCIPS/DOJ Online investigative Principle #2 

IS/ooc/ilu/library/doj oip;htm There is an a^urr>ent that at least the simplest IPAV is essentially 
ommand and that under this principle may be used without a court order. Obviously talking it 
help flesh out the validity of that argument. 



b2 

‘b7E 


b6 

b7C 


b2 

b7E 


— O riginal Message— 

From i f OGC) (FBI) 

Sent: Wednesday, August 04, 2004 11:33 AM 
To: MOTTA, THOMAS G, (ITD) (FB!); ! 
Subject: FW; IPAVs 


](ITD) (FBI) 


b6 

b7C 


NON-RECORD 


Attached is a very recent EC that addresses sensitive DITU investigative techniques - FYl. uc[ 


asked me to look at in in conjunction with a request to develop a matrix of techniques, vs. evidentiary 

predicates necessary for use by TTA in the field. He used the term IPAVs with a comment that you] 
did sop ie work for him on this subject. If either of you have anything that would be helpful on IPAVs or 


be • 

b7C 


3 ^ 


atrix, i would appreciate a copy. 


O riginal Message-- — 

From j 1 (UD) 


b6 . 
b7C 


Se nt: Wednesday, A ugust 04, 2004 10:08 AM 
To l "n COGg (FBI) 

Subject: RE: IPAVs ' 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I recently authored an EC on FBI policy as it relates to the deployment of IPAVs. If you want to know the 
details of how IPAVs work and what tfiey do, let's meet. Here's the EC. 

— Or iginal Message- — 

From;! | (OGC) (FBI) 


b6 

b7C 


8/4/2004 



Message ; . . . Page2of2, 


Se nt! Tuesday^ Aug ust 03, 2004 9:31 AM 
To j ~1 aTD) 

Subject: IPAVs 

SENSITIVE BUT UNCLASSIFIED 
NQN^RECORD 


I'm not sure that we've met yet but i have recently been detailed as DITU/CEAU's attorney. I'm ■ 
assigned to Science and Technology Law Unit/OGC. As you might guess, what DITU does is all 
new to me and I'm picking up everything as new and unusual, like IPAVs. 

I I qave me your name as a starting point for learning what IPAVs are, from which he^ 

expects me to work up a matrix for use in the field for use of the end product, e.g., evidence. I I 
said that you recently authored an EC on IPAVs. Could you please email a copy or send my the ID# 
so I can puli it off of ACS. Once I've read it I'd like to meet you and discuss this topic. 

Thanks, 



8/4/2004 


be 

b7C 


Message 
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(OTD) (CON) 


From: 

Sent: 

To: 


] (OGC) (FBI) 


Thursday. August 19, 2004 6:07 PM 
(OGC) (FBI) 


Subject: RE: descriptions affidavit 
SEgREir 


b6 

b7C 


this is the final one that we sent over. 


Q rlainai Message-- — 

From i k OGO (FBI) 

Se nt; Thursday. August 19, 2004 3:38 PM be 

To J I (OGC) (FBI) b7C 

Subject: FW: descriptions affidavit 

SEeRgt 
RECO RD X3Qg 


Can you tell me where you are in negotiations with OiPR regarding the definitions that will be used by the 
FISA court in matters affecting my client. DITU? Attached is an affidavit that lists the terms to be defi ned 
that ap pears to have been prepared in the July 04 timeframe but has not been submitted to the court. | I 
(i s waiting, evidently, to be told that these are the agreed upon definitions. Back in June 04,. you 
"tRougnt you were close to agreement.... 

In the alternative, if overall agreement has not been reached, has agreement been reached on some of the 
terms and if so which terms. This would help us to some extent. 

Thanks for your help on this. 


— O riginal Message-— 

From i U ITD) (FBI) 

Se nt! Thursday. August 19, 2004 2: 54 PM 
lo i k lTD^ (FBI) j 

Subject: RE: descriptions affidavit 


KOGC) (FBI) 


RECORD xxxx 

FYMhis one has a later date, but I don't know if it is in fact the "finar 


— O riginal Message — 

From j ~~ 1 (ITD}(FBI) 

Se nt! Thursday. Aug ust 19. 2004 12:39 PM 

To l T OGC) (FBn J t lTD) (FBI) 

Subject: FW: descriptions affidavit 


b6 

b7c 


9/6/2007 


DECLASSIFIZb BY 60322UC/LP/STP/gig 
ON 10-17-2008 




Message 


Page 2 of 5 


RECORD xxMt 


I think this was close to final 
— O riginal Message — 

Ffom r I fOGC^ (FBI) 

Sent: Friday, June 25, 2004 3:03 PM 
ToCZZIZZI^InD) (FBI) 
Subject: RE: desaiptions affidavit 



he 

hlC 


— O riginal Message — 

From l n OTD) (FBI) 

Se nt; Friday. June 25. 20 04 3:00 PM 
To j K OGC) (FBI) 

Subject: RE: desaiptions affidavit 


SfPFtgT 
RECQfW xxx x 



can you send me 


the last draft of the [ 


jaffidavit 


b6 

b7C 


O riginal Message — 

Fromr l(OGC) (FBI) 

1:26 PM 

To: I l OTP) (FBn 

Cc: MOTTA, THOMAS G. (ITD) (FBI);|_ 
ANTHONY P, (ITD) (FBI) 

Subject: RE; descriptions affidavit 


}lTD) (FBI); DICLEMENTE, 


RECORD xxxx 


are we fine on the EC. too - or does that need revision 

— O riginal Message — 

From; | ~ ~ U lTD) (FBI) 

Sent: Friday, June 25, 2004 1:24 PM 
To l I (OGC) (FBI) 

Subject: RE: descriptions affidavit 



everything else looks fine to me. 
met 


— O riginal Message — 

From i -- I (OGC) (FBI) 

Sent: Friday, June 25, 2004 11:48 AM 


9/6/2007 
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To d I OTP) (FBI): DICLEMENTF. ANTHONY P. (ITD) 

(F BIV. MOTTA. THOMA S G. fITD \rFBlV.I [ OGO (FBI) 

cc l ^ iTD^ fPBn i m rm (fbi) 

Subject: RE: descriptions affidavit 



it was reworded • i don't have a problem with the concept or with the 
practice. 


b6 

b7C 


Ori ginal Message — 

From: ] 

Se nt: Thursday, June 


irio 

From: 1 |(ITD) (FBI) 

24,2004 3: 


To:[ 


03 PM 

\ (OGC) (FBI); DICLEM ENTE. ANTtiONY P. 


(UD) (FBI); MOTTA, THOMAS G. (ITD) (FBI); 
fO GG fFSn 

Cc: | ~ (ITD) (FBI)r 

Subject: RE: descriptions affidaviT 



CORD^xxxx 


How did we deal with footnote 1? Is it ok? 


(ITD) (FBI) 


marcus 


— O riginal Message- 

From I 


](OGC) (FBI) 


Sent: Thursday, June 24, 2004 U:03 AM 
To d ' I flTD^ (FBI); DICLEMENTE, 

ANTHONY P. fITD\ (FBI); MOTTA, THOMAS G. (ITD) (FBI); 
VoqC ) (FBI) 




) (FBI)£ 


(ITD) (FBI) 

Subject: descriptions affidavit 


RECOtw xxxx 


b6 

b7C 


Attached is what I hope is the final draft of the affidavit. I 
have added the CIPAV and made any changes that were 
suggested. Please review this one last time prior to it being 
sent to OIPR. If there are any additions, corrections, 
deletions, etc. , please let me know sooner rather than 
later. Thanks. ! 1 


DERIVED FR^M^JItetti^Soure 
DECU>.SSiF\CAfiO}r^^PT\OH 1 
SECRET 


9/6/2007 
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9/6/2007 



Message 



From: [_ | (CN) (FBI) 

Sent: Thursday, Augu st 19, 2004 1 2:39 PM ' 

To: I ~l (OGC) (FB1); | 

Subject: FW: descriptions affidavit 


I think this was close to final 
— O riginal Message — 

From l K OGC) (FBI) 

S ent; Friday, June 25, 2 004 3:03 PM 
To |__ _ I (n-P) (FBI) 

Subject: RE: descriptions affidavit 


— Original Message — 

From a I (ITD) (FBI) 

S ent; Friday. June 25, 20 04 3:00 PM 

H Z- 7 ~K OGC) (FBI) 
Subject: RE: descriptions affidavit 


^can you send me the last draft of th^ 

— O riginal Message — 

From ! I (OGC (FBI) 

Se nt; Friday. June 25. 200 4 1:20 PM 
ToCI_ZZ__l(rTD) (FBI) 
Cc: MOTTA, THOMAS G, (ITD) (FBI)J_ 
(ITD) (FBI) 

Subject: RE: descriptions affidavit 


are we fine on the EC, too - or does that nes 


Or iginal Message 

From: | (ITD) (F 

S ent; Friday, June 25/ 20 04 1:24 PM 
T d [ OGC) (FBI) 

Subject: RE; descriptions affidavit 


9/6/2007 


DECLASSIFIED BY 60322UC/-LP/STP/g3g 
ON 10-17-2008 
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RECORD xxxx 


everything else looks fine to me. 
met 


Original Message 

FromI l(OGC) (FBI) 

Sent! Friday. June 25. 2004 11:48 AM 

Toj riTD) (FBI); DICLEMENTE, AI^ONY P. 

M OTTA. THOMAS G (TTD^ (FBI) i IfOG C) (FBI) 

Ce j I OTD) (FBI ] | ITD) (FBI) 

Subject: RE: descriptions affidavit 


m 

RECORD xxxx 


(ITD) (FBI); 


b6 

b7C 


it was reworded - i don't have a problem with the concept or with the practice. 

Or iginal Message 

From! ! I flTDUFBn 

Se nt: THursdav. June 24. 2004 3:03 PM 

To ! r OGQ ( FBI); DICLEMEIMTE. A NTHONY P. (ITD) (FBI); 

M OTTA. THOMAS G. ( ITD) (FBn j fO GC) (FBI) 

Ce j k lTD) (FB H t lTD) (FBI) 

Subject: RE: desaiptions affidavlf 


SEfcREf 




I xxxx 


How did we deal with footnote 1 ? Is it ok? 


marcus 


— O riginal Message — 

From ! | (OGC)(FBI) 

Se nt! Thursday. June 24. 2 004 11:03 AM 

To i IT TP) (FBI); DICLEMENTE, ANTHONY P. (ITD) 

(FBI); MOTTA, THOMAS G. (ITD) (FBDd 1(FBI) 

C d ' Y iTD) (FBI) (ITD) (FBI) 

Subject: descriptions affidavit ^ 


RECORD xxxx 


b6 

b7C 


Attached is what I hope is the final draft of the affidavit. I have added the 
CIPAV and made any changes that were suggested. Please review this 
one last time prior to it being sent to OIPR. If there are any additions, 
correcti ons, deletion s, etc., please let me know sooner rather than later. 
Thanks ! I 


9/6/2007 



, Message 




i To: Operational Technology Division Prom: Records Management 

Office of General Counsel 
Cyber Division 

Special Technology and Applications Office 
Re: 190-HQ-C1547903. 08/16/2007 


By letter dated July 24, 2007, Electronic Frontier 
Foundation, through staff attorney Marcia Hofmann, submitted a FOIA 
request to FBIHQ seeking the following records: 

All agency records (including, but not limited to, electronic 
records) concerning to Bureau's use of Computer and Internet Protocol 
Address Verifier (CIPAV) software . 

By letter dated July 19, 2007, CNET Networks, through Chief 
Political Correspondent Declan McCullagh, submitted a FOIA request to 
FBIHQ seeking the following records: 

All records, including but not limited to correspondence, 
memoranda, reports, presentations, use or deployment logs, procurement 
agreements, vendor contracts, and legal opinions, concerning or 
involving a technology used by the FBI called Computer and Internet 
Protocol Address Verifier (CIPAV) or technologies with substantially 
similar capabilities as CIPAV. 

We are sending this EC to you because we believe that you may 
have documents potentially responsive to these three FOIA requests. 

The FOIA requires the FBI to conduct a search which is reasonably 
calculated to uncover all relevant agency records in response to a FOIA 
request. As a result, we request that FBI personnel in your office be 
directed to search for any and all retrievable agency records in their 
custody, control and/or possession in those locations likely to reveal 
potentially responsive records. It is recommended that you submit an 
"all employee" e-mail to your office to identify whether any such 
records exist . 

Examples of agency records include: 

• all records or communications preserved in 
electronic or written form, including but not 
limited to correspondence, documents, data, faxes, 
files, guidance, guidelines, evaluations, 
instructions, analyses, memoranda, agreements, 
notes, orders, policies, procedures, protocols, 
reports, rules, technical manuals, technical 
specifications, training manuals or studies; 

• electronic records maintained on computers, or 
audio or video tapes; 

• e-mails (regardless of whether they have been 
designated as "record" or "non-record" in Trilogy 
Microsoft Outlook) ; 
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